Anda di halaman 1dari 150

BiPAC 7800NL

802.11n ADSL2+ Firewall Router

User Manual

Version released: 2.01


Last revised date: 06-24-2010
Table of Contents
Chapter 1: Introduction .................................................................................................................. 1
Introduction to your Router ...................................................................................................... 1
Features .................................................................................................................................. 3
ADSL Compliance...................................................................................................................................................................3
Network Protocols and Features..........................................................................................................................................3
Firewall.........................................................................................................................................................................................4
Quality of Service Control........................................................................................................................................................4
ATM, PTM and PPP Protocols.............................................................................................................................................4
IPTV Applications*2 ...................................................................................................................................................................4
Wireless LAN.............................................................................................................................................................................5
Management.............................................................................................................................................................................5
Hardware Specifications.......................................................................................................... 6
Physical Interface......................................................................................................................................................................6
Chapter 2: Installing the Router ..................................................................................................... 7
Package Contents ...................................................................................................................7
Important note for using this router..........................................................................................8
Device Description................................................................................................................... 9
The Front LEDs.........................................................................................................................................................................9
The Rear Ports........................................................................................................................................................................10
Cabling .................................................................................................................................. 11
Chapter 3: Basic Installation ........................................................................................................ 12
Connecting Your Router.........................................................................................................13
Network Configuration ........................................................................................................... 14
Configuring PC in windows 7...............................................................................................................................................14
Configuring PC in Windows Vista......................................................................................................................................16
Configuring PC in Windows XP..........................................................................................................................................18
Configuring PC in Windows 2000......................................................................................................................................19
Configuring PC in Windows 95/98/Me..............................................................................................................................20
Configuring PC in Windows NT4.0....................................................................................................................................21
Factory Default Settings ........................................................................................................ 22
Information from your ISP......................................................................................................24
Configuration via Web Interface ............................................................................................25
Chapter 4: Configuration.............................................................................................................. 26
Device Info ............................................................................................................................ 27
Summary..................................................................................................................................................................................28
WAN..........................................................................................................................................................................................29
Statistics.....................................................................................................................................................................................30
LAN ...........................................................................................................................30
WAN Service.............................................................................................................30
xTM ...........................................................................................................................31
xDSL .........................................................................................................................32
Route.........................................................................................................................................................................................35
ARP ...........................................................................................................................................................................................36
DHCP........................................................................................................................................................................................37
Quick Start............................................................................................................................. 38
Advanced setup..................................................................................................................... 42
WAN-Wide Area Network....................................................................................................................................................43
WAN Interface...........................................................................................................43
WAN Service.............................................................................................................48
LAN - Local Area Network....................................................................................................................................................61
NAT............................................................................................................................................................................................64
Virtual Server ............................................................................................................64
ALG...........................................................................................................................67
DMZ Host..................................................................................................................68
Security......................................................................................................................................................................................69
Packet Filter ..............................................................................................................69
Parental Control.......................................................................................................................................................................72
Time Restriction ........................................................................................................72
URL Filter..................................................................................................................73
QoS - Quality of Service........................................................................................................................................................76
Queue Config............................................................................................................78
QoS Classification.....................................................................................................81
Routing......................................................................................................................................................................................90
Default Gateway .......................................................................................................90
Static Route ..............................................................................................................91
Policy Routing ...........................................................................................................93
RIP ............................................................................................................................94
DNS...........................................................................................................................................................................................95
Dynamic DNS ...........................................................................................................95
DSL............................................................................................................................................................................................96
UPnP.........................................................................................................................................................................................98
DNS Proxy............................................................................................................................................................................105
Interface Grouping...............................................................................................................................................................106
Multicast.................................................................................................................................................................................108
Wireless............................................................................................................................... 109
Basic.......................................................................................................................................................................................110
Security...................................................................................................................................................................................112
MAC Filter..............................................................................................................................................................................126
Wireless Bridge....................................................................................................................................................................127
Advanced..............................................................................................................................................................................129
Station Info.............................................................................................................................................................................131
Management ....................................................................................................................... 132
System Log...........................................................................................................................................................................133
SNMP Agent........................................................................................................................................................................135
TR- 069 Client.......................................................................................................................................................................136
Internet Time.........................................................................................................................................................................138
Mail Alert.................................................................................................................................................................................139
Access Control.....................................................................................................................................................................140
Remote Access...................................................................................................................................................................141
Update Software..................................................................................................................................................................142
Backup / Update..................................................................................................................................................................143
Restart................................................................................................................................. 144
Chapter 5: Troubleshooting........................................................................................................ 145
Appendix: Product Support & Contact .......................................................................................147
Chapter 1: Introduction
Introduction to your Router
Thank you for purchasing BiPAC 7800NL series router. The BiPAC 7800NL series is a compact
ADSL2+ Router that offers users expanded wireless coverage and speedy connection at affordable
cost. The integrated 802.11n Wireless Access Point supports faster wireless speeds up to 300Mbps.
It can automatically adopt the optimal connection to deliver smooth, constant signal reception even
if obstacles are present. Robust Firewall security is featured to protect Internet access against
hacker attacks and the Quality of Service is to prioritize queues and traffic for applications such as
music downloads, online gaming, video streaming and file sharing. With ease of use setup and
friendly User Interface make the BiPAC 7800NL a perfect unit for home and SOHO users.

Express Internet Access

The BiPAC 7800NL is compliant with worldwide ADSL standards, and supports download rates of
up to 12 / 24Mbps using ADSL2 / 2+, 8Mbps using ADSL and an upload rate of up to 1Mbps. The
integrated Annex M standard supports ADSL2 / 2+ for higher uploads by doubling the upload data
rate. The 4-port Ethernet Switch incorporated into the BiPAC 7800NL enables users to connect to
multiple computers or wired-Ethernet devices easily and enjoy blistering LAN transmission for
multimedia applications such as interactive gaming, IPTV video streaming and real-time audio.

Optimal Wireless Speeds and Coverage

With an integrated 802.11n Wireless Access Point, it supports a data rates up to 300Mbps. The
router delivers up to 6 times the speed and 3 times the wireless coverage of an 802.11b/g network
device. Yet it is also backward compatible with 802.11b/g equipments. The Wi-Fi Protected Access
(WPA-PSK / WPA2-PSK) and Wired Equivalent Privacy (WEP) features enhance the level of
transmission security and access control over Wireless LAN. The router also supports the Wi-Fi
Protected Setup (WPS) standard, allowing users to establish a secure wireless network by simply
pushing a button. If the network requires wider coverage, the built-in Wireless Distribution System
(WDS) repeater function allows users to expand the wireless network without the need for any
external wires or cables.

Smooth, Responsive Net Connection

Quality of Service (QoS) gives users full control over outgoing data traffic. Priority can be assigned
by the router to ensure that important transmissions like gaming packets, VoIP calls or IPTV /
streaming content passes through the router at lightning speed, even when there is heavy Internet
traffic. The speed of different types of outgoing data passing through the router is also controlled to
ensure that users do not saturate bandwidth with their browsing activities.

Ease of Setup and Management

Easy Sign-On (EZSO), WPS push button and Auto-scan ADSL settings allow users to manage the
device functions without too much effort! The user-friendly, web-based user interface makes
installing and managing the BiPAC 7800NL extremely easy. With support for both DHCP client and
server, system administrators can manage IP assignment without having to reconfigure other
stations and fitting the router into existing network environments.

1
VLAN MUX
A Virtual LAN, commonly known as a VLAN, is a group of hosts with the common set of requirements
that communicate as if they were attached to the same broadcast domain, regardless of the physical
location. A VLAN has the same attributes as a physical LAN, but it allows for end stations to be
grouped together even if they are not located on the same network switch.
The most commonly used Virtual LAN is defined by 802.1Q tagging protocol, which expended the
original Ethernet frame header to include VLAN ID (tag) and priority bits. With the support of
network equipments, multiple virtual networks can coexist over the same physical network. Ethernet
frames are used to transfer data over ADSL line when bridging, MER or PPPoE mode is used.
While the DSL connection we usually configured is to use a PVC match a single service, PPPoE
PPPoA, bridging, etc. With the VLAN tag, we can make virtual interfaces to create multiple separate
WAN connections within the same PVC. It allows multiple services over the same PVC. The VLAN
Mux feature is designed for this purpose. For example, you have an ATM interface, PVC with
VPI/VCI 8/35, you can set the PPPoE, IPoE, and Bridge connection via the PVC without
respectively assigning the three services to three different PVCs.

Virtual AP
A Virtual Access Point is a logical entity that exists within a physical Access Point (AP). When a
single physical AP supports multiple Virtual APs, each Virtual AP appears to stations (STAs) to be
an independent physical AP, even though only a single physical AP is present. For example,
multiple Virtual APs might exist within a single physical AP, each advertising a distinct SSID and
capability set. Alternatively, multiple Virtual APs might advertise the same SSID but a different
capability set allowing access to be provided via Web Portal, WEP, and WPA simultaneously.
Where APs are shared by multiple providers, Virtual APs provide each provider with separate
authentication and accounting data for their users, as well as diagnostic information, without
sharing sensitive management traffic or data between providers. You can enable the virtual AP.

Web Based GUI

It supports web based GUI for configuration and management. It is user-friendly and comes with
online help. It also supports remote management capability for remote users to configure and
manage this product.

Firmware Upgradeable

Device can be upgraded to the latest firmware through the WEB based GUI.

2
Features
4-port 10 / 100Mbps Ethernet switch integrated
High-speed Internet Access via ADSL2 / 2+; Backward Compatible with ADSL
802.11n Wireless Access Point with Wi-Fi Protected Setup (WPS), Wi-Fi Protected
Access (WPA-PSK/ WPA2-PSK) and Wired Equivalent Privacy (WEP) support
Wireless speed up to 300Mbps
Quality of Service Control for traffic prioritization and bandwidth management
SOHO Firewall security with DoS Prevention and Packet Filtering
Universal Plug and Play (UPnP) Compliance
Dynamic Domain Name System (DDNS)
Available Syslog
Ease of Use with Quick Installation Wizard and Auto-scan ADSL settings
*2
Supports IPTV Application
Easy Sign-On (EZSO)

ADSL Compliance
Compliant with ADSL Standard
- Full-rate ANSI T1.413 Issue 2
- G.dmt (ITU G.992.1)
- G.lite (ITU G.992.2)
- G.hs (ITU G.994.1)
- ADSL over ISDN / U-R2
Compliant with ADSL2 Standard
- G.dmt.bis (ITU G.992.3)
- ADSL2 Annex M (ITU G.992.3 Annex M)
Compliant with ADSL2+ Standard
- G.dmt.bis plus (ITU G.992.5)
- ADSL2+ Annex M (ITU G.992.5 Annex M)

Network Protocols and Features


NAT, static routing and RIP-1 / 2
Universal Plug and Play (UPnP) Compliant
Dynamic Domain Name System (DDNS)
Virtual Server and DMZ
SNTP, DNS relay and IGMP proxy
IGMP snooping for video service
Management based-on IP protocol, port number and address

3
Firewall
Built-in NAT Firewall
Stateful Packet Inspection (SPI)
Prevents DoS attacks including Land Attack, Ping of Death, etc.
Remote access control for web base access
Packet Filtering - port, source IP address, destination IP address, MAC address
URL Content Filtering - domain name detection in URL string
MAC Filtering
Password protection for system management
VPN pass-through

Quality of Service Control


Supports the DiffServ approach
Traffic prioritization and bandwidth management based-on IP protocol, port number
and address

ATM, PTM and PPP Protocols


ATM Adaptation Layer Type 5 (AAL5)
Classical IP over ATM (IPoA) (RFC 2225 / RFC 1577)
Bridged or routed Ethernet encapsulation
VC and LLC based multiplexing
PPP over Ethernet (PPPoE)
PPP over ATM (RFC 2364)
MAC Encapsulated Routing (RFC 1483 MER)
OAM F4 / F5

IPTV Applications*2
Virtual LAN (VLAN)
Quality of Service (QoS)
IGMP Snooping & IGMP Proxy
VLAN MUX support

4
Wireless LAN
Compliant with IEEE 802.11n, 802.11g and 802.11b standards
2.4 GHz - 2.484 GHz frequency range
Up to 300Mbps wireless operation rate
64 / 128 bits WEP supported for encryption
WPS (Wi-Fi Protected Setup) for easy setup
Wireless Security with WPA-PSK / WPA2-PSK support
WDS repeater function support
802.1x radius supported
Web-based GUI for WLAN on/off switch

Management
Easy Sign-On (EZSO) and Auto-scan ADSL settings
Web-based GUI for remote and local management
Firmware upgrades and configuration data upload and download via web-based GUI
Embedded Telnet server for remote and local management
Available Syslog
Supports DHCP server / client / relay
TR-069*3 supports remote management
SNMP v1/v2 supports remote and local management

5
Hardware Specifications
Physical Interface
WLAN: 2 x 2dbi detachable antennas
DSL: ADSL port
Ethernet: 4-port 10 / 100Mbps auto-crossover (MDI / MDI-X) Switch
Factory default reset button
WPS push button
Power jack
Power switch

6
Chapter 2: Installing the Router
Package Contents
BiPAC 7800NL 802.11n ADSL2+ Firewall Router
Quick Start Guide
CD containing the on-line manual
Two 2dBi detachable antennas
Ethernet (RJ-45) cable
RJ-11 ADSL/ telephone cable
Power adapter
Splitter / Micro-filter (Optional)

7
Important note for using this router

8
Device Description
The Front LEDs

LED Meaning

Lit red when WAN port fails to get IP address.


Lit green when WAN port gets IP address successfully.
1 Internet
Unlit when the device is in bridge mode or WAN connection is
absent.

2 DSL Lit green when the device is successfully connected to an ADSL


DSLAM. (line sync)

Flash green when WPS configuration is in progress.


3 WPS
Unlit when WPS fails.

Lit green when a wireless connection is established.


4 Wireless
Unlit when wireless is disabled.

Ethernet port
Lit green when successfully connected to an Ethernet device.
5 1X - 4X
Blinking when data is being transmitted / received.
(RJ-45 connector)

When the system is ready, it will be lit green.


6 Power Lit red when the device fails to boot or when the device is in
emergency mode

9
The Rear Ports

Port Meaning

1 Power Switch Power ON/OFF switch.

2 Power Connect it with the supplied power adapter.

3 Reset Press for more than 5 seconds to restore the device to its factory
default mode.
Push WPS button to trigger Wi-Fi Protected Setup function.
4 WPS For WPS configuration details, please refer to WPS Setup section of
this User Manual.

Connect your computer to a LAN port using the included Ethernet cable
5 Ethernet (with RJ-45 cable)

Connect the supplied RJ-11 cable to this port when connecting to the
6 DSL ADSL/telephone network

7 Wireless Antenna Connect the detachable antenna for wireless connection.

10
Cabling
One of the most common causes of problem is bad cabling or ADSL line(s). Make sure that all
connected devices are turned on. On the front panel of your router is a bank of LEDs. Verify that the
LAN Link and ADSL line LEDs are lit. If they are not, verify if you are using the proper cables. If the
error persists, you may have a hardware problem. In this case you should contact technical support.

Ensure that all other devices connected to the same telephone line as your router (e.g. telephones,
fax machines, analogue modems) have a line filter connected between them and the wall socket
(unless you are using a Central Splitter or Central Filter installed by a qualified and licensed
electrician), and ensure that all line filters are correctly installed and the right way around. Missing
line filters or line filters installed the wrong way around can cause problems with your ADSL
connection, including causing frequent disconnections. If you have a back-to-base alarm system you
should contact your security provider for a technician to make any necessary changes.

11
Chapter 3: Basic Installation
The router can be configured through your web browser. A web browser is included as a standard
application in the following operating systems: Linux, Mac OS, Windows 7 / 98 / NT / 2000 / XP / Me
/ Vista, etc. The product provides an easy and user-friendly interface for configuration.

Please check your PC network components. The TCP/IP protocol stack and Ethernet network
adapter must be installed. If not, please refer to your Windows-related or other operating system
manuals.

There are ways to connect the router, either through an external repeater hub or connect directly
to your PCs. However, make sure that your PCs have an Ethernet interface installed properly prior
to connecting the router device. You ought to configure your PCs to obtain an IP address through
a DHCP server or a fixed IP address that must be in the same subnet as the router. The default IP
address of the router is 192.168.1.254 and the subnet mask is 255.255.255.0 (i.e. any attached PC
must be in the same subnet, and have an IP address in the range of 192.168.1.1 to 192.168.1.253).
The best and easiest way is to configure the PC to get an IP address automatically from the router
using DHCP. If you encounter any problem accessing the router web interface it is advisable to
uninstall your firewall program on your PCs, as they can cause problems accessing the IP address
of the router. Users should make their own decisions on what is best to protect their network.

Please follow the following steps to configure your PC network environment.

12
Connecting Your Router
Users can connect the ADSL2+ router as the following.

13
Network Configuration
Configuring PC in windows 7

1. Go to Start. Click on Control Panel.

Then click on Network and Internet.

2. When the Network and Sharing


Center window pops up, select and click
on Change adapter settings on the left
window panel.

3. Select the Local Area Connection,


and right click the icon to select
Properties.

14
4. Select Internet Protocol Version 4
(TCP/IPv4) then click Properties.

5. In the TCP/IPv4 properties window,


select the Obtain an IP address
automatically and Obtain DNS Server
address automatically radio buttons.
Then click OK to exit the setting.

6. Click OK again in the Local Area


Connection Properties window to
apply the new configuration.

15
Configuring PC in Windows Vista
1. Go to Start. Click on Network.
2. Then click on Network and Sharing
Center at the top bar.

3. When the Network and Sharing Center


window pops up, select and click on
Manage network connections on the left
window column.

4. Select the Local Area Connection,


and right click the icon to select Properties..

16
5. Select Internet Protocol Version 4
(TCP/IPv4) then click Properties.

6. In the TCP/IPv4 properties window,


select the Obtain an IP address
automatically and Obtain DNS Server
address automatically radio buttons.
Then click OK to exit the setting.
7. Click OK again in the Local Area
Connection Properties window to apply
the new configuration.

17
Configuring PC in Windows XP
1. Go to Start > Control Panel (in Classic
View). In the Control Panel, double-click on
Network Connections
2. Double-click Local Area Connection.

3. In the Local Area Connection Status


window, click Properties.

4. Select Internet Protocol (TCP/IP) and


click Properties.

5. Select the Obtain an IP address


automatically and the Obtain DNS server
address automatically radio buttons.

6. Click OK to finish the configuration.

18
Configuring PC in Windows 2000
1. Go to Start > Settings > Control Panel.
In the Control Panel, double-click on Network
and Dial-up Connections.
2. Double-click Local Area Connection.

3. In the Local Area Connection Status


window click Properties.

4. Select Internet Protocol (TCP/IP) and


click Properties.

5. Select the Obtain an IP address


automatically and the Obtain DNS server
address automatically radio buttons.

6. Click OK to finish the configuration.

19
Configuring PC in Windows 95/98/Me
1. Go to Start > Settings > Control Panel.
In the Control Panel, double-click on
Network and choose the Configuration tab.
2. Select TCP/IP > NE2000 Compatible, or
the name of your Network Interface Card (NIC)
in your PC.

3. Select the Obtain an IP address


automatically radio button.

4. Then select the DNS Configuration tab.


5. Select the Disable DNS radio button
and click OK to finish the configuration.

20
Configuring PC in Windows NT4.0
1. Go to Start > Settings > Control Panel.
In the Control Panel, double-click on Network
and choose the Protocols tab.
2. Select TCP/IP Protocol and click Properties.

3. Select the Obtain an IP address from a


DHCP server radio button and click OK.

21
Factory Default Settings
Before configuring your router, you need to know the following default settings.

Web Interface (Username and Password)

Three user levels are provided by this router, thus root user, general user and remote user
respectively.

Root user (advanced user)


Username: admin
Password: admin

General user
Username: user
Password: user

Remote user (for remote login)


Username: support
Password: support

Device LAN IP settings


IP Address: 192.168.1.254
Subnet Mask: 255.255.255.0

DHCP server
DHCP server is enabled.
Start IP Address: 192.168.1.100
IP pool counts: 100

22
LAN and WAN Port Addresses

The parameters of LAN and WAN ports are pre-set in the factory. The default values are shown in
the table.

LAN Port WAN Port


IP address 192.168.1.254
Subnet Mask 255.255.255.0 The PPPoE function is
DHCP server function Enabled enabled to automatically get
100 IP addresses continuing the WAN port configuration
IP addresses for from the ISP.
from 192.168.1.100 through
distribution to PCs
192.168.1.199

23
Information from your ISP
Before configuring this device, you have to check with your ISP (Internet Service Provider) to find
out what kind of service is provided such as DHCP (Obtain an IP Address Automatically, Static IP
(Fixed IP Address) or PPPoE.

Gather the information as illustrated in the following table and keep it for reference.

VPI/VCI, VC / LLC-based multiplexing, Username, Password, Service


PPPoE(RFC2516) Name, and Domain Name System (DNS) IP address (it can be
automatically assigned by your ISP when you connect or be set manually).

VPI/VCI, VC / LLC-based multiplexing, Username, Password and Domain


PPPoA(RFC2364) Name System (DNS) IP address (it can be automatically assigned by your
ISP when you connect or be set manually).

VPI/VCI, VC / LLC-based multiplexing, IP address, Subnet mask, Gateway


IPoA(RFC1577) address, and Domain Name System (DNS) IP address (it is a fixed IP
address).

Pure Bridge VPI/VCI, VC / LLC-based multiplexing to use Bridged Mode.

24
Configuration via Web Interface
Open your web browser; enter the IP address of your router, which by default is 192.168.1.254, and
click or press Enter key on the keyboard, a login prompt window will appear. The default root
username and password are admin and admin respectively.

Congratulations! You are now successfully logged in to the Firewall Router!

If the authentication succeeds, the Status page below will appear on the screen.

25
Chapter 4: Configuration
Once you have logged on to your BiPAC 7800NL Router via your web browser, you can begin to set
it up according to your requirements. On the configuration homepage, the left navigation pane links
you directly to the setup pages, which include:

Device Info (Summary, WAN, Statistics, Route, ARP, DHCP)


Quick Start
Advanced Setup (WAN, LAN, NAT, Security, Parental Control, Quality of Service, Routing, DNS,
DSL, UPnP, DNS Proxy, Interface Grouping, Multicast)
Wireless (Basic, Security, MAC Filter, Wireless Bridge, Advanced, Station Info)
Management (System Log, SNMP Agent, TR-069 Client, Internet Time, Mail Alert, Access
Control, Remote Access, Update Software, Backup/Update)

26
Device Info
This Section gives users an easy access to the information about the working router and
view the current status of the router. Here Summary, WAN, Statistics, Router, ARP and
DHCP six subsections are included.

27
Summary

The basic information about the device is provided here (the following is a configured
screenshots to let users understand clearly).

Device Information
Model Name: Display the model name.
Host Name: Display the name of the router.
Software Version: Firmware version.
MAC Address: Display the MAC address.
DSL PHY and Driver Version: Display DSL PHY and Driver version.
Wireless Driver Version: Display wireless driver version.

WAN
Line Rate Upstream (Kbps): Display Upstream line Rate in Kbps.
Line Rate Downstream (Kbps): Display Downstream line Rate in Kbps.
LAN IPv4 Address: Display the LAN IPv4 Address.
Default Gateway: Display Default Gateway.
Primary DNS Server: Display IPV4 address of Primary DNS Server.
Secondary DNS Server: Display IPV4 address of Secondary DNS Server.

Note: if you have configured Internet time, then the summary will list the Date/Time in
the last row.

28
WAN

This table displays the information of the WAN connections, users can turn here for WAN connection
information.

Interface: the WAN connection interface.


Description: the description of this connection.
Type: the protocol used by this connection.
VlanMuxld: Show the status of the VLANMuxld, VLAN ID or disabled. If VLAN ID is -1, then
disabled is shown in this field, while if VLAN ID isnt -1, the exact VLAN ID is shown here in this field.
Igmp: Display the status of IGMP, disabled or enabled.
NAT: Display the status of NAT, disabled or enabled.
Firewall: Display the status of Firewall, disabled or enabled.
Status: Display the status of this WAN connection.
IPv4 Address: the WAN IPv4 Address the device obtained.

29
Statistics

LAN
The table shows the statistics of LAN.

Interface: List each LAN interface. P1-P4 indicate the four LAN interfaces.
Bytes: Display the Received and Transmitted traffic statistics in Bytes.
Packets: Display the Received and Transmitted traffic statistics in Packets.
Errors: Display the statistics of errors arising in Receiving or Transmitting data.
Drops: Display the statistics of drops arising in Receiving or Transmitting data.
Reset: Press this button to get the latest information.

WAN Service
The table shows the statistics of LAN.

Interface: Display the connection interface.


Description: the description for the connection.
Bytes: Display the WAN Received and Transmitted traffic statistics in Bytes.
Packets: Display the WAN Received and Transmitted traffic statistics in Packests.
Errors: Display the statistics of errors arising in Receiving or Transmitting data.
Drops: Display the statistics of drops arising in Receiving or Transmitting data.
Reset: Press this button to get the latest information.

30
xTM
The Statistics-xTM screen displays all the xTM statistics

Port Number: Shows number of the port for xTM.


In Octets: Number of received octets over the interface.
Out Octets: Number of transmitted octets over the interface.
In Packets: Number of received packets over the interface.
Out Packets: Number of transmitted packets over the interface.
In OAM Cells: Number of OAM cells received.
Out OAM Cells: Number of OAM cells transmitted.
In ASM Cells: Number of ASM cells received.
Out ASM Cells: Number of ASM cells transmitted.
In Packet Errors: Number of received packets with errors.
In Cell Errors: Number of received cells with errors.
Reset: Click to reset the statistics.

31
xDSL

Mode: Modulation protocol, including G.dmt, G.lite, T1.413, ADSL2, AnnexL, ADSL2+ and AnnexM.
Traffic Type: transfer mode, here supports ATM and PTM.
Status: Show the status of DSL link.
Link Power State: Show link output power state.
Line Coding (Trellis): Trellis on/off.
SNR Margin (0.1 dB): show the Signal to Noise Ratio(SNR) margin.
32
Attenuation (0.1 dB): This is estimate of average loop attenuation of signal.
Output Power (0.1 dBm): show the output power.
Attainable Rate (Kbps) : The sync rate you would obtain.
Rate (Kbps): show the downstream and upstream rate in Kbps.
K (number of bytes in DMT frame): show the number of bytes in DMT frame.
R (number of check bytes in RS code word): show the number of check bytes in RS code word.
S (RS code word size in DMT frame): show the RS code word size in DMT frame.
D (interleaver depth): show the interleaver depth.
Delay (msec): show the delay time in msec.
INP (DMT symbol): show the DMT symbol.
Super Frames: the total number of super frames.
Super Frame Errors: the total number of super frame errors.
RS Words: Total number of Reed-Solomon code errors.
RS Correctable Errors: Total number of RS with correctable errors.
RS Uncorrectable Errors: Total number of RS words with uncorrectable errors.
HEC Errors: Total number of Header Error Checksum errors.
OCD Errors: Total number of out-of-cell Delineation errors.
LCD Errors: Total number of Loss of Cell Delineation.
Total Cells: Total number of cells.
Data Cells: Total number of data cells.
Bit Errors: Total number of bit errors.
Total ES: Total Number of Errored Seconds.
Total SES: Total Number of Severely Errored Seconds.
Total UAS: Total Number of Unavailable Seconds.
xDSL BER Test: Click this button to start a bit Error Rate Test. The ADSL Bit Error Rate (BER) test
determines the quality of the ADSL connection. The test is done by transferring idle cells containing
a known pattern and comparing the received data with this known pattern to check for any errors.

33
Select the Tested Time(sec), press Start to start test.

When it is OK, the following test result window will appear. You can view the quality of ADSL
connection. Here the connection is OK.

Reset : Click this button to reset the statistics.

34
Route

Destination: the IP address of destination network.


Gateway: the IP address of the gateway this route uses.
Subnet Mask: the destination subnet mask.
Flag: show the status of the route.
L U: show the route is activated or enabled.
L H (host): destination is host not the subnet.
L G: show that the outside gateway is needed to forward packets in this route.
L R: show that the route is reinstated from dynamic routing.
L D: show that the route is dynamically installed by daemon or redirecting.
L M: show the route is modified from routing daemon or redirect.
Metric: Display the number of hops counted as the Metric of the route.
Service: Display the service that this route uses.
Interface: Display the existing interface this route uses.

35
ARP
This section displays the routers ARP (Address Resolution Protocol) Table, which shows the
mapping of Internet (IP) addresses to Ethernet (MAC) addresses. This is useful as a quick way of
determining the MAC address of the network interface of your PCs to use with the routers Firewall
MAC Address Filter function. See the Firewall section of this manual for more information on this
feature.

IP Address: Shows the IP Address of the device that the MAC address maps to.
Flag: Shows the current status of the ARP entries.
L Complete: the route resolving is processing well.
L M(Marked as permanent entry): the route is permanent.
L P (publish entry): publish this route item.
MAC Address: Shows the MAC address that is corresponded to the IP address of the device it is
mapped to.
Device: here refers to the physical interface, it is a concept to identify Clients from LAN or WAN. For
example, the Clients in LAN, here displays br0.

36
DHCP
The DHCP Table lists the DHCP lease information for all IP addresses assigned by the DHCP
server in the device.

IP Address: The IP address which is assigned to the host with this MAC address.

MAC Address: The MAC Address of internal DHCP client host.

Host Name: The Host Name of DHCP client.

Register Information: Show the remaining time information during registration.

37
Quick Start
This part is to let you quickly configure and start your router to access internet.

1. To configure DSL, press Continue to go on to next step, or if you only want to configure Wireless,
press Jump to Wireless setting to go to step 8.
2. When ADSL line is not ready, the screen1 below will appear to remind you. Then you should
connect the ADSL line. While ADSL line is ready, the screen 2 below will appear to let you go on.
Here you can select Auto or Manually. Select Auto will go to step 3, and select manually will go to
step 4.

Screen 1

Screen 2

38
3. Here wait while the DSL is scanning, when the scanning is OK, the scanning result will appear,
see screen 3, and then it will quickly goes to step 6. Or you can Abort to manually setting to step 4.

Screen 3

4. Here you should select the Layer2 Interface. ATM and PTM are two kinds of transmission mode.
You can select according to your ISP. Select ATM for example. Click Add to add WAN Interface.

5. Enter the VPI/VCI from your ISP.

39
6. Enter the username, password from your ISP, for IP and DNS settings, also refer to your ISP.

7. Wait while the device is configured.

8. WAN port configuration is success.

40
9. After the configuration is successful, click Next to Wireless button and you may proceed to
configure the Wireless setting. For security information, please turn to wireless>security section in
this manual for help.

10. Configurations success.

Then you successfully quick configured your router and can access the internet, turn to Device Info,
you will see the basic information.

For more information, turn to Advanced setup for help.

41
Advanced setup
When you click this item, the column will expand to display the sub-items that will allow you to further
configure your router.
WAN, LAN, NAT, Security, Parental Control, Quality of Service, Routing, DNS, DSL, UPnP,
DNS Proxy, Interface Grouping and Multicast.

The function of each configuration sub-item is described in the following sections.

42
WAN-Wide Area Network

A WAN (Wide Area Network) is a computer network that covers a broad geographical area (eg.
Internet) that is used to connect LAN and other types of network systems. There are the items
within the WAN section: WAN Interface and WAN Service.

WAN Interface

ATM

Layer2 Interface: 2 transfer mode, ATM or PTM.

The following is the interface listing table.


Click Add to add WAN interface.

VCI/VPI: enter the VCI/VPI from your ISP.


Link Type: select the link type (protocol), EOA, PPPoA, IPoA.
Connection Mode:
L Default Mode: this mode only allows single service over one connection.
L VLAN MUX Mode: this mode allows multiple services over one PVC.
The two modes can be different in WAN service configuration. And PPPoA and IPoA do not use
Ethernet frames for data transfer so they cannot work with VLAN Mux feature. Thus, Connection

43
Mode Parameter will be hided if you select PPPoA or IPoA in Link Type.
Encapsulation Mode: select the encapsulation mode from the drop-down menu according to the
link Type.
Service Category: select the service category from the drop-down menu to determine your service
category.
L UBR without PCR: UBR(Unspecified Bit Rate), PCR(Peak cell Rate)
UBR is a kind of QoS, which doesnt provide assurance about the cell latency, the bit loss rate etc,
it is a best-effort service.

IP QoS Schedule Algorithm: select the Schedule Algorithm, SP(Strict Priority), always sends the
packets with the highest priority, WFQ(Weighted Fair Queuing), an automatically bandwidth
adjusting method, sharing the available bandwidth when congestion happens, the bandwidth is
assigned according to the priority and the weight value. Turn to the Quality of Service > Queue
Config section for more information.
Precedence of the default queue: default 8(lowest)

Weight Value of default queue: enter the value, 1-63, the highest is 63.
MPAAL Group Precedence: select the precedence identification, 1-8, the highest is 1.

L UBR with PCR/ CBR(Constant Bit Rate)


UBR is a kind of service providing constant rate service, is idea for timely and fixed bandwidth
needed service.

Peak Cell Rate: enter Peak Cell Rate.

44
L None Realtime VBR/ Realtime VBR(Variable Bit Rate)
VBR is a kind of service providing some assurance about latency and bit loss rate and is often
associated with video and time sensitive service. NR-VBR allows more time delay to R-VBR.

Enter Peak Cell Rate, Sustainable Cell Rate and Maximum Burst Rate.

Click Apply to apply the WAN interface.

Check the remove checkbox, then press Remove to delete it only if this interface are not used by a
WAN Service, if it is used by a WAN service, first remove the WAN service, then turn back to remove
the interface.
Dont feel confused, it will remind you by the following prompt window.

45
PTM
PTM Setting is similar to ATM.

PTM Priority: Select the PTM priority, Normal or High.

Click Apply to save your settings. The interface will be added to the PTM Interface listing table.

46
Now follow the above steps, we set two ATM WAN interfaces for future illustration, one is of
DefaultMode, and one is of VlanMuxMode.

47
WAN Service

WAN Service allows you configure one or more services over one interface (connection). The
following is the WAN Service listing table. Your configured WAN service will be listed here.

Default Connection mode

Select the interface which is a Default mode connection configured in WAN Service, here for
example, in the following, atm0/(0_8_35) is a Default mode connection.

Click Add to create one WAN service.

Select the interface, the listed interfaces are the one you configured in WAN interface section. Click
Next to further configure.

PPPoE

48
Type: select the protocol advised by your ISP, here select PPPoE.
Description: user-defined description.
Click Next to go on.

Username: enter ISP account.


Password: enter the password.
Service name: user-defined name.
Authentication method: select the authentication method.
Fullcone NAT: enable or disable fullcone NAT. Fullcone is a kind of NAT, in this mode, all requests
from the same internal IP address and port are mapped to the same external IP address and port.
Furthermore, any external host can send a packet to the internal host, by sending a packet to the
mapped external address.

Note: In PPPoE connection, NAT is enabled by default, you can determine whether to enable
Fullcone NAT. And while you disabled Fullcone NAT and only use NAT, the default NAT type is Port
Restricted cone NAT. Of Port-Restricted cone NAT, the restriction includes port numbers. Specifically,
an external host can send a packet, with source IP address X and source port P, to the internal host
only if the internal host had previously sent a packet to IP address X and port P

Dial on demand: enable or disable, if you want to Dial on demand, enable this function.
Inactivity timeout: available when you enable Dial on demand function. Enter the Inactivity

49
timeout interval.
IPv4 Address: enable or disable to assign static IP address to PPPoE link.
IP Address: enter the Static IP address if you enable Static IP Address.
Obtain DNS: check whether to obtain DNS address automatically.
Primary/Secondary DNS: if you uncheck Obtain DNS, then enter then primary/secondary DNS
address.
PPPoE Debug mode: check whether to enable this function, it is used to debug PPPoE link, and the
debug message will be seen in System log.
Bridge PPPoE Frame between WAN and Local Ports: check whether to enable this function. It
allows PC in LAN to set up its own PPP link, or the PC will access internet via the PPP link in WAN
port.
IGMP Multicast Proxy: check whether to enable this function. IGMP (Internet Group Management
Protocol) Proxy intercept the IGMP request from Clients and forward it to the router after some
dealings.

Click Next to go on to the Default Gateway setting.

Click Next to go on. Then you can view the information about your settings.

50
If you confirm about the above settings, click Apply to apply your settings. Then the service will be
listed as follows.

If you don not need the service, select the item you want to remove, check the checkbox, then press
Remove, it will be OK.

Here the corresponding WAN interface and WAN Service have been configured, if it is OK, you can
access the internet. You can go to Device Info>WAN or Summary to view the WAN connection
information.

51
IP over Ethernet

Type: Select IP over Ethernet.


Description: You are allowed to enter the user defined name for this service.
Click Next to go to next step.

Here two modes are supported for users to deal with the IP and DNS. You can select obtain
automatically or manually input the information according to your ISP.
Obtain an IP address automatically: check whether to enable this function.
Option 60 Vendor ID: Enter the associated information by your ISP. This option is used by DHCP
clients to optionally identify the vendor type and configuration of a DHCP client. The information is a
string of n octets, interpreted by servers. Vendors may choose to define specific vendor class
identifiers to convey particular configuration or other identification information about a client.
Option 61 IAID: Enter the associated information provided by your ISP. You should input 8
hexadecimal numbers.
Option 61 DUID: Enter the associated information provided by your ISP. You should input
hexadecimal number(s).
Option 125: Option 125 is a complementary standard of DHCP protocol, it is used to encapsulate
option 125 message into DHCP offer packet before forward it to clients. After the clients receive the
52
packet, it check the option 125 field in the packet with the prestored message, if it is matched, then
the client accepts this offer, otherwise it will be abandoned. Check Enable or Disable this function.
Default setting is Disable.
WAN IP Address: Enter your IP address to the device provided by your ISP. If Fixed IP Address is
selected in the IPv4 Protocol field, default value 0.0.0.0 will display in this field.
WAN Subnet Mask: Enter your submask to the device provided by your ISP.
WAN gateway IP Address: Enter your gateway IP address to the device provided by your ISP.
Obtain DNS: check whether to enable obtain DNS function.
Primary/Secondary DNS: enter the primay/secondary DNS address when you uncheck Obtain
DNS checkbox.

Note: If you dont know well about the DHCP Option, you can leave it empty or leave it as default.

Click Next to go to next step.

NAT: The NAT (Network Address Translation) feature allows multiple users to access the Internet
through a single IP account by sharing the single IP address. If users on your LAN have their own
public IP addresses to access the Internet, NAT function can be disabled. When enabled, a Fullcone
NAT parameter will appear, you can determine whether to enable Fullcone NAT. While only NAT
enabled, the default NAT type Port-Restricted cone NAT will be used. For detail, please turn to page
47 for help.
Firewall: Check/uncheck this item to enable/disable firewall function.
IGMP Multicast: IGMP (Internet Group Membership Protocol) is a protocol used by IP hosts to
report their multicast group memberships to any immediately neighboring multicast routers. Check
this item to enable IGMP multicast on that WAN interface for multicast forwarding.

53
Click Next to go to set default gateway.

Click Next to go on.

Click Apply to apply your settings.

54
Bridging

Type: Select Bridging.


Description: You are allowed to enter the user defined name for this service.

Click Next to go to next step.

Click Apply to apply your settings.

55
VLAN MUX Connection Mode
It is similar to Default Connection in configuration. Select the interface which is a VLAN MUX mode
connection configured in WAN Service, here for example, in the following, atm1/(0_1_35) is a VLAN
MUX mode connection.

select interface(VLAN MUX mode).

Click Next to go on to next step.

Type: select the protocol, PPPoE, IP over Internet, Bridge.


Description: user-defined description.
802.1P Priority: It indicates the frame priority level from 0 (lowest) to 7 (highest), which can be used
to prioritize different classes of traffic (voice, video, data, etc). Enter the priority identification,
tagged:0-7, untagged:-1.
802.1Q VLAN ID: It is a parameter to specify the VLAN which the frame belongs. Enter the VLAN ID
identification, tagged: 0-4094, untagged:-1.
You can leave 802.1P Priority and 802.1Q VLAN ID as default setting,-1, means untagged, in this
mode, the vlan tag header will not be contained, but if you want to allow one service for the specific
vlan, here you should set the two parameters, the vlan tag header will be contained.

The following steps are similar to Default Connection settings, for help turn to Page 48-55.

56
Lets look at a scenario in which 1 PPPoE and 1 Bridge service needed by user.
In the above page, click Next to set WAN service parameters.

Click Next to set the default gateway of this connection.

57
Click Next to view the information you have set to the connection, then click Apply to save your
settings.

Then you can see the PPPoE connection is listed below. Here it is just one service over
atm1/(0_1_35).

Then we can again set a Bridging connection over atm1/(0_1_35) interface. Click Add in the above
page, the atm1/(0_1_35) also is listed for selection to add services.

Continue clicking Next to select Bridging connection type.

58
Click Next to make sure your settings below match the settings provided by your ISP. And Click
Apply to save your settings.

This screen is the interface we set previous, here used for understanding.

59
The below is WAN connection status, here you can see clearly the multiple services over one PVC.

See from the above diagrams, we have set one PVC, it is VPI/VCI 1/35. But we have set two
services on the same PVC, they are bridging and PPPoE services.

While in contrast to Default connection mode, one PVC can only hold one service, if you want to
more than one service over one PVC, you should apply from your ISP more PVCs to meet your
needs.

60
LAN - Local Area Network
A Local Area Network (LAN) is a shared communication system network where many computers
are connected. This type of network is area defined and is usually limited to a confined region within
a building or just within the same storey of a building.

Parameters
Group Name: here group refers to the group you set in Interface Grouping section, you can set
the parameters for the specific group. Select the group by the drop-down box. For more
information please refer to Interface Grouping of this manual.
IP address: the IP address of the router. Default is 192.168.1.254.
Subnet Mask: the default Subnet mask on the router.
IGMP Snooping: Enable or disable the IGMP Snooping function. Without IGMP snooping,
multicast traffic is treated in the same manner as broadcast traffic - that is, it is forwarded to all
ports. With IGMP snooping, multicast traffic of a group is only forwarded to ports that have
members of that group.

61
DHCP Server
You can disable or enable the DHCP (Dynamic Host Configuration Protocol) server or enable the
routers DHCP relay functions. The DHCP protocol allows your router to dynamically assign IP
addresses to PCs on your network if they are configured to obtain IP addresses automatically.

L Disable

Disable the DHCP Server function.

L Enable

Enable the DHCP function, enter the information wanted. Here as default.

Start IP Address: the start IP address of the range the DHCP Server used to assign to the Clients.
End IP Address: the end IP address f the range the DHCP Server used to assign to the Clients.
Leased Time: the leased time for each DHCP Client.
Maximum Leased Time(hour): the Maximum Leased Time(hour).

L DHCP Server Relay

If you check DHCP Relay and then you must enter the IP address of the DHCP server which
assigns an IP address back to the DHCP client in the LAN. Use this function only if advised to do so
by your network administrator or ISP.

62
Static IP List
The specified IP will be assigned to the corresponding MAC Address listed in the following table
when DHCP Server assign IP Addresses to Clients.

Press Add to the Static IP List.

Enter the MAC Address, IP Address and Host Name, then click Apply to confirm your settings.

IP Alias

This function allows the creation of multiple virtual IP interfaces on this router. It helps to connect two
or more local networks to the ISP or remote node.

IP Alias: check whether to enable this function.


IP Address: Specify an IP address on this virtual interface.
Netmask: Specify a subnet mask on this virtual interface.

Click Apply to apply your settings.

63
NAT

NAT (Network Address Translation) feature translates a private IP to a public IP, allowing multiple
users to access the Internet through a single IP account, sharing the single IP address. It is a natural
firewall for the private network.

Virtual Server
In TCP/IP and UDP networks a port is a 16-bit number used to identify which application program
(usually a server) incoming connections should be delivered to. Some ports have numbers that are
pre-assigned to them by the IANA (the Internet Assigned Numbers Authority), and these are referred
to as well-known ports. Servers follow the well-known port assignments so clients can locate them.
If you wish to run a server on your network that can be accessed from the WAN (i.e. from other
machines on the Internet that are outside your local network), or any application that can accept
incoming connections (e.g. Peer-to-peer/P2P software such as instant messaging applications and
P2P file-sharing applications) and are using NAT (Network Address Translation), then you will
usually need to configure your router to forward these incoming connection attempts using specific
ports to the PC on your network running the application. You will also need to use port forwarding if
you want to host an online game server.
The reason for this is that when using NAT, your publicly accessible IP address will be used by and
point to your router, which then needs to deliver all traffic to the private IP addresses used by your
PCs. Please see the WAN configuration section of this manual for more information on NAT.
The device can be configured as a virtual server so that remote users accessing services such as
Web or FTP services via the public (WAN) IP address can be automatically redirected to local
servers in the LAN network. Depending on the requested service (TCP/UDP port number), the
device redirects the external service request to the appropriate server within the LAN network.
This part is only available when NAT is enabled.

It is virtual server listing table as you see, Click Add to configure.

64
The following configuration page will appear to let you configure.

Interface: select from the drop-down menu the interface you want the virtual server(s) applies to.
Server Name: select the server name from the drop-down menu.
Custom Service: it is a kind of service to let users customize the service they want. Enter the user-
defined service name here. It is a parameter only available when users select Custom Service in
the above parameter.
Server IP Address: Enter your server IP Address here.
External Port
L Start: Enter a port number as the external starting number for the range you want to give
access to internal network.
L End: Enter a port number as the external ending number for the range you want to give
access to internal network.
Internal Port
L Start: Enter a port number as the internal staring number.
L End: Here it will generate automatically according to the End port number of External port
and cant be modified.
Protocol: select the protocol this service used: TCP/UDP, TCP, UDP.

65
Set up
1. Select a Server Name from the drop-down menu, then the port will automatically appear, modify
some as you like, or you can just leave it as default. Remember to enter your server IP Address.

2. Press Apply to conform, and the items will be list in the Virtual Servers Setup table.

66
Remove
If you dont need a specified Server, you can remove it. Check the check box beside the item you
want to remove, then press Remove, it will be OK.

ALG

The ALG Controls enable or disable protocols over application layer.

67
DMZ Host
The DMZ Host is a local computer exposed to the Internet. When setting a particular internal IP
address as the DMZ Host, all incoming packets will be checked by the Firewall and NAT algorithms
then passed to the DMZ host, when a packet received does not use a port number used by any
other Virtual Server entries.

DMZ Host IP Address: Enter the IP Address of a host you want it to be a DMZ host.

Using port mapping does have security implications, since outside users are
able to connect to PCs on your network. For this reason you are advised to use
specific Virtual Server entries just for the ports your application requires instead
of simply using DMZ or creating a Virtual Server entry for All protocols, as
doing so results in all connection attempts to your public IP address accessing
the specified PC.

If you have disabled the NAT option in the WAN-ISP section, the Virtual Server
function will hence be invalid.
If the DHCP server option is enabled, you have to be very careful in assigning
the IP addresses of the virtual servers in order to avoid conflicts. The easiest way
of configuring Virtual Servers is to manually assign static IP address to each
virtual server PC, with an address that does not fall into the range of IP
addresses that are to be issued by the DHCP server. You can configure the
Attention virtual server IP address manually, but it must still be in the same subnet as the
router.

68
Security

Packet Filter

Packet filtering enables you to configure your router to block specified internal/external users (IP
address) from Internet access, or you can disable specific service requests (Port number) to /from
Internet. The relationship among all filters is or operation, which means that the router checks
these different filter rules one by one, starting from the first rule. As long as one of the rules is
satisfied, the specified action will be taken.

Above is the listing table. Click Add to add new configurations.

Filter name: a user-defined filter name or you can select from the drop-down menu the application,
and leave the automatically generated name as the Filter name.
IP Version: Select the IP Version, here just IPv4.
Internal IP Address / External IP Address: This is the Address-Filter used to allow or block traffic
to/from particular IP address (es). Input the range you want to filter out. If you leave empty, it means
any IP address.
Protocol: Specify the packet type (TCP, UDP, ICMP, etc.) that the rule applies to.
Internal Port: This Port or Port Range defines the ports allowed to be used by the Remote/WAN to
connect to the application. Default is set from range 1 ~ 65535. It is recommended that this option be

69
configured by an advanced user.
External Port: This is the Port or Port Range that defines the application. Default is set from range 1
~ 65535.
Action: If a packet matches this filter rule, forward (allows the packets to pass) or drop (disallow
the packets to pass) this packet.
Direction: Determine whether the rule is for outgoing packets or for incoming packets.

Set up
Select the application you want to filter, input the information or leave it as default according to
yourself.

Press Apply to confirm and the item will be listed in the following table.

70
Remove

Check the checkbox, press Remove, the item will be removed.

Reorder
When there are more than one Filter application, you can reorder them to the priority you want. The
former is prior to the latter one.

Click or to change the priority of the filter, then press to confirm.

71
Parental Control

Time Restriction
A MAC (Media Access Control) address is the unique network hardware identifier for each PC on
your networks interface (i.e. its Network Interface Card or Ethernet card). Using your routers MAC
Address Filter function, you can configure the network to block specific machines from accessing
your LAN during the specified time.

Action:

L Disable: disable the Time Restriction function.

L Allow: allow the members in the following table to access the router.

L Block: block the members listed in the following table from accessing the router.

Note: here users should add the rules first, then select the wanted action.

Click Add to add the rules.

Username: user-defined name.

MAC Address: enter the MAC address(es) you want to allow or block to access the router and LAN.
The format of MAC address could be: xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.

Days of the week: select the days of a week this rule takes efforts.

72
Start Time: enter the start time of each day in hh:mm format. Leaving it empty means 00:00.

End Time: enter the end time of each day in hh:mm format. Leaving it empty means 23:59.

Click Apply to confirm your settings. The following prompt window will appear to remind you of the
attention.

If you neednt this rule, you can check the box, press Remove, it will be OK.

URL Filter

URL (Uniform Resource Locator e.g. an address in the form of http://www.abcde.com or


http://www.example.com) filter rules allow you to prevent users on your network from accessing
particular websites by their URL. There are no pre-defined URL filter rules; you can add filter rules to
meet your requirements.

73
Keywords Filtering: Allow blocking against specific keywords within a particular URL rather than
having to specify a complete URL (e.g.to block any image called advertisement.gif). When enabled,
your specified keywords list will be checked to see if any keywords are present in URLs accessed to
determine if the connection attempt should be blocked. Please note that the URL filter blocks web
browser (HTTP) connection attempts using port 80 only.

Domains Filtering: This function checks the whole URL address but not the IP address against
your list of domains to block or allow. If it is matched, the URL request will either be sent (Trusted) or
dropped (Forbidden).

Restrict URL Features: Click Block Java Applet to filter web access with Java Applet components.
Click Block ActiveX to filter web access with ActiveX components. Click Block Cookie to filter web
access with Cookie components. Click Block Proxy to filter web proxy access.

Exception IP Address: You can input a list of IP addresses as the exception list for URL filtering.

Log: Select Enable for this option if you will like to capture the logs for this URL filter policy.

Keywords Filtering

Click to add the keywords.

Enter the Keyword, for example image, then click Add.

You can add other keyword like this. The keywords you add will be listed as above. If you want to
reedit the keyword, press the Edit radio button left beside the item, and the word will listed in the
Keyword field, edit, then press Edit/Delete to confirm. If you want to delete certain keyword, check
Delete checkbox right beside the item, and press Edit/Delete. Click Return to be back to the
previous page.

74
Domain Filtering

Click to add Domains.

Domains Filtering: enter the domain you want this filter applies to.
Type: select the action this filter deals with the Domain.
L Forbidden Domain: the domain is the forbidden to access.
L Trusted Domain: the domain is trusted and allowed access.

Enter a domain and select whether this domain is trusted or forbidden with the pull-down menu. Next,
click Add. Your new domain will be added to either the Trusted Domain or Forbidden Domain listing,
depending on which you selected previously. For specific process, please refer to Keywords
filtering.

Exception IP Address

Click to add the IP Addresses.

Enter the except IP address. Click Add to save your changes. The IP address will be entered into
the Exception List, and excluded from the URL filtering rules in effect. For specific process, please
refer to Keywords filtering.

At the URL Filter page, press Apply to confirm your settings.

75
QoS - Quality of Service

QoS helps you to control the data upload traffic of each application from LAN (Ethernet) to WAN
(Internet). It facilitates you the features to control the quality and speed of throughput for each
application when the system is running with full upstream load.

Quality of Service: Check to activate this function and the following field will be available.
If Enable QoS checkbox is selected, choose a default DSCP mark to automatically mark incoming
traffic without reference to a particular classifier.
If Enable Qos checkbox is not selected, all QoS will be disabled for all interfaces.
Select Default DSCP Mark: Select the default DSCP mark from the list-box. Differentiated Services
Code Point (DSCP) is the first 6 bits in the ToS byte. DSCP Mark allows users to classify the traffic
of the application to be executed according to the DSCP value. The default DSCP mark is used to
mark all egress packets that do not match any classification rules.

Note: Before configuring Queue config and QoS Classification section, you must enable QoS
function, for the reason that the queues activation will depend on this, the classification will also
depend on this.

The corresponding IP precedence and DSCP mapping table is listed below.

76
IP Precedence and DSCP Mapping Table
Mapping Table
Default (000000) Best Effort
EF(101110) Expedited Forwarding
AF11 (001010) Assured Forwarding Class1(L)
AF12 (001100) Assured Forwarding Class1(M)
AF13 (001110) Assured Forwarding Class1(H)
AF21 (010010) Assured Forwarding Class1(L)
AF22 (010100) Assured Forwarding Class1(M)
AF23 (010110) Assured Forwarding Class1(H)
AF31 (011010) Assured Forwarding Class1(L)
AF32 (011100) Assured Forwarding Class1(M)
AF33 (011110) Assured Forwarding Class1(H)
AF41 (100010) Assured Forwarding Class1(L)
AF42 (100100) Assured Forwarding Class1(M)
AF43 (100110) Assured Forwarding Class1(H)
CS1(001000) Class Selector(IP precedence)1
CS2(010000) Class Selector(IP precedence) 2
CS3(011000) Class Selector(IP precedence)3
CS4(100000) Class Selector(IP precedence) 4
CS5(101000) Class Selector(IP precedence) 5
CS6(110000) Class Selector(IP precedence) 6
CS7(111000) Class Selector(IP precedence) 7

DSCP indicates three kinds of service, Class Selector (CS), Assured Fording (AF) and Expedited
Forwarding (EF). AF1, AF2, AF3 and AF4 are four kinds of assured forwarding services. Each AF
has three different packet loss priorities from high, medium, to low. Also, CS1-CS7 indicates the IP
precedence.

Click Apply to confirm the settings.

77
Queue Config

Queue is a technology of managing congestion providing precautions with the packets storing and
scheduling. Queue Config allows you to configure a QoS queue entry and assign it to a specific
network interface. Each queue entry set here will be used by the classfier to place ingress packets
appropriately.

Note: the interface set in the WAN> WAN Interface will be list as Default Queue here, and the
parameters listed above can be configured there. For detail, please turn to WAN > WAN Interface
section for help. You can also add other queues to the ATM and PTM interfaces despite of the
default queue.
And Wireless Service queue will be enabled by default if you enable wireless. Also if you enable
virtual APs, the corresponding WMM service queues will be enabled as well.

Name: the queue name.


Key: the item number.
Interface: the queue interface.
Scheduler Algorithm: the QoS Scheduler Algorithm, SP(Strict Priority) or WFQ(Weight Fair
Queuing)
Precedence: the priority identification.
Weight: the weight value, 1-63. the highest is 63.
PTM Priority: the PTM priority, normal or high.
Enable: check the enable check-box, then press Enable to activate the queue. If you want to
disable this queue, you can uncheck the corresponding check-box and press Enable, the queue will
be disabled.

If the queue is enabled, you will see a tick, like . Otherwise, the queue is disabled.

78
Click Add to create a queue.

Name: Type the name of the queue.


Enable: Select whether to enable the queue.
Interface: Select which interface this queue applies to.

Select interface, the following corresponding parameters will appear to let you configure, Enter the
information, Click Apply to conform. Then the item will be listed in the table.

Precedence: the precedence of the queue, interface P1-P4, 4 levels from high to low are 1-4. ATM
or PTM interfaces, 7 levels from high to low are 1-7, for the precedence of the default queue with the
interface of SP Scheduler Algorithm is 8. Here if the interface is of WFQ Scheduler Algorithm, you
should enter the weight of the queue.

79
Click Apply to save and the added queue will be listed as below.

Enable: check the enable check-box, then press Enable to activate the queue. If you want to
disable this queue, you can uncheck the corresponding check-box and press Enable, the queue will
be disabled.
Remove: To delete the QoS rule from the table, check Remove checkbox then click Remove
button to delete the selected item.
Note: only the queue added via the above mode can be directly removed here, the default queue
cant be removed here, if you want to remove them, remove the interface in WAN > WAN Interface
section.

Note: In ATM mode, maximum queues can be configured: 16


In PTM mode, maximum queues can be configured: 8
For each Ethernet interface, maximum queues can be configured: 4
If you disable WMM function in Wireless Page, queues related to wireless will not take effects.

80
QoS Classification

This screen displays a packet QoS summary table and allows user to add or remove a QoS
classification class. This is the main place to configure the classification, marking and queuing rules.

Click Add to add Network Traffic Class Rule.

81
The classification rule is a AND mode, that is a rule takes effect only when all of the specified
conditions must be satisfied.

Parameters
Traffic Class Name: Assign a name for this class to uniquely identify the others among multiple
classes.
Rule Order: Select the priority for this class rule.
Rule Status: Select Enable to activate this class rule.

Specify Classification Criteria


The following parameters are to be classification rule. Enter or select appropriate parameters on the
following fields. A blank criterion indicates it is not used for classification.
Class Interface: select the interface you want to be the one aspect of the classification criteria.
Here LAN->WAN and WAN->LAN can be viewed as IP QoS, the others can be viewed as ported-
based QoS, which means that control the QoS of certain port such. For example, if you select P1
port, then criteria applies to this port, that is ported-based QoS.
Entry Type: select the application type.
Source/destination MAC Address: enter the source and destination MAC address as the QoS
Classification Criteria. The format should be xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx.
Source/destination MAC Mask: MAC mask is similar to IP mask, and the format also should be
xx:xx:xx:xx:xx:xx or xx-xx-xx-xx-xx-xx. It is used to hide some information of the MAC address. 1,
means needed and 0 means ignored. For example, MAC address e0:3b:4a:c2:ca:e2 and MAC
mask ff:ff:ff:00:00:00, that is whatever MAC address while matches e0:3b:4a:XX:XX:XX, will be
accepted.

Specify Classification Results


Enter or select appropriate parameters you want for the packets matched the above classification
criteria in the following fields. You have to choose a classification queue. A blank mark or tag value
means no change.
Assign Classification Queue: assign classification queue from the drop-down box. If you want to
select the queue, you should make sure the specific queue is enabled in Queue Config section.
Mark Differentiated Service Code Point (DSCP): select the DSCP you want to be the new DSCP
for the packets which matched the above classification criteria.
Mark 802.1p priority: it is a LAN Layer 2 QoS/CoS Protocol for Traffic Prioritization. It is
interoperable with IEEE 802.1Q. 802.1p has 8 kinds of priority.
Tag VLAN ID: enter the tag VLAN ID, 0-4094, used to determine the VLAN the frame belongs to.
Rate Type: You can choose Limited or Guaranteed.
Ratio: The rate percent in contrast to that on WAN interface.

Note: 802.1p/vlan tag feature be supported only when in bridge mode, DSL WAN interface.

Click Apply to confirm the settings and you will be returned to the QoS Classification page.
Enable: To disable the item, please uncheck Enable check box then click Enable button.
Remove: To delete the QoS class from the table, check Remove checkbox then click Remove
button to delete the selected item.

82
Set up a QoS Classification

IP QoS
LAN to WAN IP QoS
1. It is a QoS controlling the traffic from LAN to WAN. So first make sure there is at least one WAN
queue. If you have configured WAN interface and it will appeared as a default queue, you can also
add other queues of the specific interface. See Queue Config.
Here we have a atm0 (WAN interface), the interface has a default queue and an added queue. Make
sure to enable the queue.

83
2. In QoS Classification Setup page, Click Add to add a Qos Classification.

Then in the appeared Add Network Traffic Class Rule page, enter the information to set up a rule.

1) Specify the rule name, rule order, and rule status.

2) Specify the classification criteria. Here you can set every parameter to strictly control the specific
traffic or you can set several parameters to let them be the key elements to control the traffic. A
blank criterion indicates it is not used for classification.

84
3) Specify the classification results. Here you must Assign Classification Queue. Whether the
following parameters are needed is according to your needs. If you do not want to change the
original information, please leave it empty. The queues listed here in the Assign Classification
Queue are WAN interface queues set in Queue Config section. Select the needed queue. If you find
none queues here, turn back to check whether you have configured a queue and enable it.

3. Click Apply to save your settings. The added rule will listed as below.

Enable: check the enable check-box, then press Enable to activate the rule. If you want to disable
this rule, you can uncheck the corresponding check-box and press Enable button, the rule will be
disabled.
Remove: To delete the QoS class from the table, check Remove checkbox then click Remove
button to delete the selected item.

85
WAN to LAN IP QoS

1. Here we take WAN to LAN (P1) QoS for example. Make sure there are enabled port P1 based
queues here. LAN queues need your configuration. You can enable wireless to enable WMM queues
by default or add P1-P4 ported based queues manually.

2. In QoS Classification Setup page, Click Add to add a Qos Classification.

86
Then in the Add Network Traffic Class Rule page, enter the information to set up a rule.

3. Click Apply to save your settings. The added rule will be listed as below.

87
Port-based QoS
Take port P1 to WAN QoS for example.
1. First make sure there is at least a WAN queue and it is enabled.

2. In QoS Classification Setup page, Click Add to add a QoS Classification.

88
Then in the Add Network Traffic Class Rule page, enter the information to set up a rule to your
needs. To Assign Classification queue, select the needed WAN queue.

3. Click Apply to save your settings and the added rule will be listed as below.

89
Routing

Default Gateway

To set default gateway and Available Routed WAN Interface. This interfaces are the ones you have
set in WAN section, here select the one you want to be the default gateway by moving the interface

via or .

Note: Only one default gateway interface will be used according to the priority with the first being the
highest and the last one the lowest priority if the WAN interface is connected.

90
Static Route

With static route feature, you are equipped with the capability to control the routing of the all the
traffic across your network. With each routing rule created, you can specifically assign the
destination where the traffic will be routed to.

Above is the static route listing table, click Add to create static routing.

IP Version: select the IP version, here supports IPv4.


Destination IP Address / Prefix Length: enter the destination IP address and the prefix length, the
prefix length means the number of 1 in the submask, it is another mode of presenting submask. For
example, 192.168.1.0/24, submask is 255.255.255.0.
Interface: select an interface this route applies to.
Gateway IP Address: enter the gateway IP address.
Metric: Metric is a policy for router to commit router, to determine the optimal route. Enter one
number greater than or equal to 0.
Click Apply to apply this route and it will be listed in the route listing table.

91
In listing table you can remove the one you dont want by checking the checking box and press
Remove button.

92
Policy Routing

Here users can set a route for the host (source IP) in a LAN interface to access outside through a
specified Default Gateway or a WAN interface.

The following is the policy Routing listing table.

Click Add to create a policy route.

Policy Name: user-defined name.


Physical LAN Port: select the LAN port.
Source IP: enter the Host Source IP.
Interface: select the WAN interface which you want the Source IP to access outside through.
Default Gateway: enter the default gateway which you want the Source IP to access outside
through.

Click Apply to apply your settings. And the item will be listed in the policy Routing listing table. Here
if you want to remove the route, check the remove checkbox and press Remove to delete it.

93
RIP

RIP, Router Information Protocol, is a simple Interior Gateway Protocol (IGP). RIP has two versions,
RIP-1 and RIP-2.

Interface: the interface the rule applies to.


Version: select the RIP version, there are two versions, RIP-1 and RIP-2.
Operation: RIP has two operation mode.
L Passive: only receive the routing information broadcasted by other routers and modifies its
routing table according to the received information.
L Active: working in this mode, the router sends and receives RIP routing information and
modifies routing table according to the received information.
Enable: check the checkbox to enable RIP rule for the interface.

Note: RIP can not be configured on the WAN interface which has NAT enabled (such as PPPoE).

Click Apply to apply your settings.

94
DNS

DNS, Domain Name System, is a distributed database of TCP/IP application. DNS provides
translation of Domain name to IP.

Dynamic DNS

The Dynamic DNS function allows you to alias a dynamic IP address to a static hostname, allowing
users whose ISP does not assign them a static IP address to use a domain name. This is especially
useful for hosting servers via your ADSL connection, so that anyone wishing to connect to you may
use your domain name, rather than having to use your dynamic IP address, which changes fromtime
to time. This dynamic IP address is the WAN IP address of the router, which is assigned to you by
your ISP.

You will first need to register and establish an account with the Dynamic DNS provider using their
website, for example http://www.dyndns.org/
Dynamic DNS:
L Disable: Check to disable the Dynamic DNS function.
L Enable: Check to enable the Dynamic DNS function. The following fields will be activated and
required.

Wildcard: When enabled, you allow the system to lookup on domain names that do not exist to
have MX records synthesized for them.
Dynamic DNS Server: Select the DDNS service you have established an account with.
Domain Name, Username and Password: Enter your registered domain name and your username
and password for this service.
Period: Set the time period between updates, for the Router to exchange information with the DDNS
server. In addition to updating periodically as per your settings, the router will perform an update
when your dynamic IP address changes

95
DSL

This screen allows you to set DSL parameters. DSL knowledge is required to configure these
settings. Contact your ISP to make sure that these parameters are correct.

Modulation: There are 7 modes G.Dmt, G.lite, T1.413, ADSL2, AnnexL, ADSL2+,
AnnexM that user can select for this connection.
Phone line pair: This is for reserved only. You can choose "Inner Pair" or "Outer Pair".
Capability: There are 2 options Bitswap Enable and SRA Enable that user can select for this
connection.
L Bitswap Enable: Allows bitswaping function.
L SRA Enable: Allows seamless rate adaptation.
Click Apply to confirm the settings.

Click to future configure DSL.

Select the Test Mode, or leave it as default.

Tone Selection: suggesting you to leave it as default or let it configured by an advanced user.
The frequency band of ADSL is split up into 256 separate tones, each spaced 4.3125 kHz apart.

96
With each tone carrying separate data, the technique operates as if 256 separate modems were
running in parallel. The tone range is from 0 to 31 for upstream and from 32 to 255 for
downstream

97
UPnP
UPnP offers peer-to-peer network connectivity for PCs and other network devices, along with control
and data transfer between devices. UPnP offers many advantages for users running NAT routers
through UPnP NAT Traversal, and on supported systems makes tasks such as port forwarding
much easier by letting the application control the required settings, removing the need for the user to
control advanced configuration of their device.
Both the users Operating System and the relevant application must support UPnP in addition to the
router. Windows XP and Windows Me natively support UPnP (when the component is installed), and
Windows 98 users may install the Internet Connection Sharing client from Windows XP in order to
support UPnP. Windows 2000 does not support UPnP.

UPnP:
L Enable: Check to enable the routers UPnP functionality.
L Disable: Check to disable the routers UPnP functionality.

98
Installing UPnP in Windows Example

Follow the steps below to install the UPnP in Windows Me.


Step 1: Click Start and Control Panel. Double-click Add/Remove Programs.
Step 2: Click on the Windows Setup tab and select Communication in the Components selection
box. Click Details.

Step 3: In the Communications window, select the Universal Plug and Play check box in the
Components selection box.

Step 4: Click OK to go back to the Add/Remove Programs Properties window. Click Next.
Step 5: Restart the computer when prompted.

99
Follow the steps below to install the UPnP in Windows XP.
Step 1: Click Start and Control Panel.
Step 2: Double-click Network Connections.
Step 3: In the Network Connections window, click Advanced in the main menu and select Optional
Networking Components .

The Windows Optional Networking Components Wizard window displays.

Step 4: Select Networking Service in the Components selection box and click Details.

100
Step 5: In the Networking Services window, select the Universal Plug and Play check box.
Step 6: Click OK to go back to the Windows Optional Networking Component Wizard window and
click Next.

Auto-discover Your UPnP-enabled Network Device


Step 1: Click start and Control Panel. Double-click Network Connections. An icon displays under
Internet Gateway.
Step 2: Right-click the icon and select Properties.

101
Step 3: In the Internet Connection Properties window, click Settings to see the port mappings that
were automatically created.

Step 4: You may edit or delete the port mappings or click Add to manually add port mappings.

102
Step 5: Select Show icon in notification area when connected option and click OK. An icon displays
in the system tray

Step 6: Double-click on the icon to display your current Internet connection status.

103
Web Configurator Easy Access

With UPnP, you can access web-based configuration for the BiPAC 7800NL without first finding out
the IP address of the router. This helps if you do not know the routers IP address.
Follow the steps below to access web configuration.

Step 1: Click Start and then Control Panel.


Step 2: Double-click Network Connections.
Step 3: Select My Network Places under Other Places.

Step 4: An icon describing each UPnP-enabled device shows under Local Network.
Step 5: Right-click on the icon of your BiPAC 7800NL and select Invoke. The web configuration login
screen displays.
Step 6: Right-click on the icon of your BiPAC 7800NL and select Properties. A properties window
displays basic information about the BiPAC 7800NL.

104
DNS Proxy

DNS proxy is used to forward request and response message between DNS Client and DNS Server.
Hosts in LAN can use router serving as a DNS proxy to connect to the DNS Server in public to
correctly resolve Domain name to access the internet.

DNS Proxy: select whether to enable or disable DNS Proxy function, default is enabled.
Host name of the Broadband Router: enter the host name of the router. Default is home.gateway.
Domain name of the LAN network: enter the domain name of the LAN network. home.gateway.

105
Interface Grouping

Interface grouping is a function to group interfaces, known as VLAN. A Virtual LAN, commonly known
as a VLAN, is a group of hosts with the common set of requirements that communicate as if they were
attached to the same broadcast domain, regardless of the physical location. A VLAN has the same
attributes as a physical LAN, but it allows for end stations to be grouped together even if they are not
located on the same network switch.

Click Add to add groups. But note that the maximum number can be 16.

Group Name: type a group name.

106
WAN interface used in the grouping: select from the drop-down box the WAN interface you want
to applied in the group.
Grouped LAN Interfaces: select the LAN interfaces you want to group as a single group from
Available LAN Interfaces.
Automatically Add Clients With following DHCP Vendor IDs: enter the DHCP Vendor IDs for
which you want the Clients automatically added into the group. DHCP vendor ID (DHCP 60) is an
Authentication for DHCP Messages.

Click Apply to confirm your settings and your added group will be listed in the Interface Grouping
table below.

If you want to remove the group, check the box as the following and press Remove.

Note: If you like to automatically add LAN clients to a WAN Interface in the new group add the
DHCP vendor ID string.
By configuring a DHCP vendor ID string any DHCP client request with the specified vendor
ID (DHCP option 60) will be denied an IP address from the local DHCP server.
If a vendor ID is configured for a specific client device, please REBOOT the client device
attached to the modem to allow it to obtain an appropriate IP address.
Each LAN interface can only be added into one group and one WAN interface can only be
used in one group.

107
Multicast

Multicast is one of the three network transmission modes, Unicast, Multicast, Broadcast. It is a
transmission mode that supports point-to-multipoint connections between the sender and the
recipient. IGMP protocol is used to establish and maintain the relationship between IP host and the
host directly connected multicast router. The hosts associated should all support IGMP protocol.
IGMP have three versions, IGMP v1, IGMP v2, IGMP v3.

Default Version: enter the supported IGMP version, 1-3, default is IGMP v3.
Query Interval: enter the periodic query interval time (sec) the multicast router sending the query
message to hosts to understand the group membership information.
Query Response Interval: enter the response interval time (sec).
Last Member Query Interval: enter the interval time (sec) the multicast router query the specified
group after it has received leave message.
Robustness Value: enter the router robustness parameter, 2-7.
Maximum Multicast Groups: enter the Maximum Multicast Groups.
Maximum Multicast Data Sources( for IGMP v3): enter the Maximum Multicast Data Sources,1-24.
Maximum Multicast Group Members: enter the Maximum Multicast Group Members.
Fast leave: check to determine whether to support fast leave. If this value is enabled, IGMP proxy
removes the membership of a group member immediately without sending an IGMP membership
query on downstream. This is very helpful if user wants fast channel (group change) changing in
cases like IPTV environment.
LAN to LAN (Intra LAN) Multicast: check to determine whether to support LAN to LAN (Intra LAN)
Multicast. If user want to have a multicast data source on LAN side and he want to get IGMP
snooping enabled, then this LAN-to-LAN multicast feature should be enabled.

108
Wireless

This section provides you ways to configure wireless access. When you click this item, the column
will expand to display the sub-items that will lead you to configure your router.
Basic, Secturity, MAC Filter, Wireless Bridge, Advanced and Station Info are included here.

109
Basic

It let you determine whether to enable Wireless function and set the basic parameters of an AP and
the Virtual APs.

Wireless: Default setting is set to Enable. If you do not have any wireless devices, check the
checkbox again to unselect.
Hide SSID: It is function in which transmits its SSID to the air so that when wireless client searches
for a network, router can then be discovered and recognized. Check the checkbox to determine
whether you want to hide SSID.
Clients Isolation: if you enabled this function, then each of your wireless clients will not be
communicate with each other.
Disable WMM Advertise: Stop the router from advertising its Wireless Multimedia (WMM)
functionality, which provides basic quality of service for time-sensitive applications (e.g. VoIP, Video).
Check to disable or enable this function.
Wireless multicast Forwarding (WMF): check to enable or disable wireless multicast forwarding.
SSID: The SSID is the unique name of a wireless access point (AP) to be distinguished from another.
For security purpose, change the default wlan-ap to a unique ID name to the AP already built-in to
the routers wireless interface. It is case sensitive and must not excess 32 characters. Make sure
your wireless clients have exactly the SSID as the device, in order to get connected to your network.
Note: SSID is case sensitive and must not excess 32 characters.
BSSID: Basic Set Service Identifier, it is a local managed IEEE MAC address, and is 48 bits value.
Country: Different countries have different wireless band resources, so you can select the
appropriate Country according to the area where you want to device used.
Max Clients: enter the number of max clients the wireless network can supports,1-16.
Max-Guest/virtual Access points: A Virtual Access Point is a logical entity that exists within a

110
physical Access Point (AP). When a single physical AP supports multiple Virtual APs, each Virtual
AP appears to stations (STAs) to be an independent physical AP, even though only a single physical
AP is present. For example, multiple Virtual APs might exist within a single physical AP, each
advertising a distinct SSID and capability set. Alternatively, multiple Virtual APs might advertise the
same SSID but a different capability set allowing access to be provided via Web Portal, WEP, and
WPA simultaneously. Where APs are shared by multiple providers, Virtual APs provide each provider
with separate authentication and accounting data for their users, as well as diagnostic information,
without sharing sensitive management traffic or data between providers. You can enable the virtual
AP.
Here you can enable some Virtual APs according to the request. And the other parameters of virtual
APs are the same to the above.

Click Apply to apply your settings.

111
Security
Wireless security is the prevention of unauthorized access or damage to computers using wireless
network.

Manual Setup AP
Select SSID: select the SSID you want these settings apply to.
Network Authentication
L Open

WEP Encryption: select to enable or disable WEP Encryption. Here select Enable.
Encryption Strength: select the strength, 128-bit or 64-bit.
Current Network Key: select the one to be the current network key. Please refer to key 1- 4
below.
Network Key (1- 4): Enter 13 ASCII characters or 26 hexadecimal digits for 128-bit encryption
keys.Enter 5 ASCII characters or 10 hexadecimal digits for 64-bit encryption keys.

112
L Shared
It is similar to network authentication Open. But here the WEP Encryption must be enabled.

L 802.1x

RADIUS Server IP Address: RADIUS( Remote Authentication Dial In User Service), Enter
the IP address of RADIUS authentication server.
RADIUS Server Port: Enter the port number of RADIUS authentication server here.
RADIUS Key: Enter the password of RADIUS authentication server.
WEP Encryption: select to enable or disable WEP Encryption. Here select Enable.
Current Network Key: select the one to be the current network key. Please refer to key 2- 3
below.
Network Key (1- 4): Enter 13 ASCII characters or 26 hexadecimal digits for 128-bit encryption
keys.Enter 5 ASCII characters or 10 hexadecimal digits for 64-bit encryption keys.

113
L WPA

WPA Group ReKey Internal: The period of renewal time for changing the security key
automatically between wireless client and Access Point (AP). The unit is second.
RADIUS Server IP Address: RADIUS( Remote Authentication Dial In User Service), Enter
the IP address of RADIUS authentication server.
RADIUS Server Port: Enter the port number of RADIUS authentication server here.
RADIUS Key: Enter the password of RADIUS authentication server.
WPA/WAPI Encryption: There are two Algorithms, AES (Advanced Encryption Standard) and
TKIP(Temporal Key Integrity Protocol) which help to protect the wireless communication.

L WPA-PSK / WPA2-PSK

WPA/WAPI passphrase: enter the WPA.WAPI passphrase, you can click here to display to view
it.
WPA Group ReKey Internal: The period of renewal time for changing the security key
automatically between wireless client and Access Point (AP). The unit is second.
WPA/WAPI Encryption: There are two Algorithms, AES (Advanced Encryption Standard) and
TKIP(Temporal Key Integrity Protocol) which help to protect the wireless communication.

L WPA2

WPA2 Preauthentication: When a wireless client wants to handoff to another AP, with
114
preauthentication, it can perform 802.1X authentications to the new AP, and when handoff
happens, this mode will help reduce the association time used.
Network Re-auth Interval: the interval for network Re-authentication. The unit is second.
WPA Group ReKey Internal: The period of renewal time for changing the security key
automatically between wireless client and Access Point (AP). The unit is second.
RADIUS Server IP Address: RADIUS( Remote Authentication Dial In User Service), Enter
the IP address of RADIUS authentication server. The unit is second.
RADIUS Server Port: Enter the port number of RADIUS authentication server here.
RADIUS Key: Enter the password of RADIUS authentication server.
WPA/WAPI Encryption: There are two Algorithms, AES (Advanced Encryption Standard) and
TKIP(Temporal Key Integrity Protocol) which help to protect the wireless communication.

L Mixed WPA2/WPA

WPA2 Preauthentication: When a wireless client wants to handoff to another AP, with
preauthentication, it can perform 802.1X authentications to the new AP, and when handoff
happens, this mode will help reduce the association time used.
Network Re-auth Interval: the interval for network Re-authentication. The unit is second.
WPA Group ReKey Internal: The period of renewal time for changing the security key
automatically between wireless client and Access Point (AP). The unit is second.
RADIUS Server IP Address: RADIUS( Remote Authentication Dial In User Service), Enter
the IP address of RADIUS authentication server.
RADIUS Server Port: Enter the port number of RADIUS authentication server here.
RADIUS Key: Enter the password of RADIUS authentication server.
WPA/WAPI Encryption: There are two Algorithms, AES (Advanced Encryption Standard) and
TKIP(Temporal Key Integrity Protocol) which help to protect the wireless communication.

115
L Mixed WPA2/WPA-PSk

WPA/WAPI passphrase: enter the WPA.WAPI passphrase, you can click here to display to view it.
WPA Group ReKey Internal: The period of renewal time for changing the security key automatically
between wireless client and Access Point (AP). The unit is second.
WPA/WAPI Encryption: There are two Algorithms, AES (Advanced Encryption Standard) and
TKIP(Temporal Key Integrity Protocol) which help to protect the wireless communication.

WPS Setup
WPS (Wi-Fi Protected Setup) feature is a standard protocol created by Wi-Fi Alliance. WPS is used
to exchange the AP setting with Station and configure Ap setting.This feature greatly simplifies the
steps needed to create a Wi-Fi network for a residential or an office setting. WPS supports 2 types
of configuration methods which are commonly known among consumers: PIN Method & PBC
Method.

WPS: select enable to enable WPS function. As you see, WPS can only be available when WPA-
PSK, WPA2 PSK or OPEN mode is configured.

Note: here wireless can be configured as Registrar and Enrolee mode respectively. When AP is
configured as Registrar, you should select Configured in the WPS AP Mode below, and default WPS
AP Mode is Configured. When AP is configured as Enrolee, the WPS AP Mode below should
changed to Unconfigured. Follow the following steps.

116
Configure AP as Registrar
Add Enrollee with PIN method
1. select radio button PIN.
2. Input PIN from Enrollee Station (16837546 in this example). Help: it is to help users to
understand PIN.
3.Click .

117
3. Operate Station to start WPS Adding Enrollee. Launch the wireless clients WPS utility (eg.Ralink
Utility). Set the Config Mode as Enrollee, press the WPS button on the top bar, select the AP (eg.
wlan-ap) from the WPS AP List column. Then press the PIN button located on the middle left of
the page to run the scan.

118
4. The clients SSID and security setting will now be configured to match the SSID and security
setting of the registrar.

You can check the message in the red ellipse with the security parameters you set, here we all use
the default.

119
Add Enrollee with PBC Method

1. Select radio button Push-Button and Click Or Press the physical button on
router.

120
2. Operate Station to start WPS Adding Enrollee. Launch the wireless clients WPS Utility (eg.
Ralink Utility). Set the Config Mode as Enrollee. Then press the WPS button and choose the
correct AP (eg. wlan-ap) from the WPS AP List section before pressing the PBC button to run the
scan.

121
3. When the PBC button is pushed, a wireless communication will be established between your
router and the PC. The clients SSID and security setting will now be configured to match the SSID
and security setting of the router.

122
Configure AP as Enrollee

Add Registrar with PIN Method

1. Set AP to Unconfigured Mode and Click Config AP button.

123
2. Launch the wireless clients WPS utility (eg. Ralink Utility). Set the Config Mode as Registrar.
Enter the PIN number (76229909 for example) in the PIN Code column then choose the correct AP
(eg. wlan-ap) from the WPS AP List section before pressing the PIN button to run the scan.

124
3. The routers (APs) SSID and security setting will now be configured to match the SSID and
security setting of the registrar.

4. Do Web Page refresh after ER complete AP Configuration to check the new parameters setting.

125
MAC Filter

Select SSID: select the SSID you want this filter applies to.
MAC Restrict Mode:
L Disable: disable the MAC Filter function.
L Allow: allow the hosts with the following listed MACs to access the wireless network.
L Deny: deny the hosts with the following listed MACs to access the wireless network.

Click Add to add the MACs.

MAC Address: enter the MAC address(es). The format of MAC address could be: xx:xx:xx:xx:xx:xx
or xx-xx-xx-xx-xx-xx.

Click Apply to apply your settings and the item will be listed below.

If you need not the rules, check the remove checkbox and press Remove to delete it.

126
Wireless Bridge
WDS (wireless distributed system) is a wireless access point mode that enables wireless link and
communication with other access point. It is easy to be installed, simply define the peers MAC
address of the connected AP. WDS takes advantages of cost saving and flexibility which no extra
wireless client device is required to bridge between two access points and extending an existing
wired or wireless infrastructure network to create a larger network.
Here you can select to decide what role the AP servers as, AP or wireless bridge (WDS).

AP Mode: determines whether the gateway will act as an Access point or as a Bridge.
L Access Point: the gateway communicates with both clients and bridges.
L Wireless Bridge: the gateway communicates with other WDS devices only. In this mode, the
gateway doesnt communicate with client devices.
If your wireless network includes repeaters that use WDS, the gateway in wireless bridge mode will
also communicate with your repeaters. The gateway in wireless bridge mode will not communicate
with a repeater that uses a proprietary (non-WDS) mode.

Bridge Restrict: When AP Mode is set to Wireless Bridge, this determines whether the gateway
will communicate with all other bridges or only specific ones:

L Enable: to enable wireless bridge restriction. Only those specified in the Remote MAC
Address the gateway can communicate with.

Remote Bridge MAC Address: enter the remote bridge MAC addresses. Here up to 4 bridge
MAC addresses are supported.

127
L Enabled (Scan): to enable wireless bridge restriction. Only those been scanned the gateway
can communicate with.

Remote Bridge MAC Address: select the remote bridge MAC addresses.

L Disable: Does not restrict the gateway to communicating with bridges that have their MAC
address listed, but it is still open to communicate with all bridges that are in the same network.

Click Apply to apply your settings.

128
Advanced
Here users can set some advanced parameters about wireless.

Band: select frequency band. Here 2.4GHZ.


Channel: Allows channel selection of a specific channel (1-7) or Auto mode.
Auto Channel Timer(min): the auto channel times length it takes to scan in minutes. Only available
for auto channel mode.
802.11n/EWC: select to auto enable or disable 802.11n.
Bandwidth: Select bandwidth. The higher the bandwidth the better the performance will be.
Control Sideband: only available for 40MHz. It allows you to select upper sideband or lower
sideband. Sideband refers to the frequency band either above (upper sideband) or below (lower
sideband) the carrier frequency, within which fall the spectral components produced by modulation
of a carrier wave.
802.11n Rate: It allows you to select the fixed transmission rate or auto.
129
802.11n Protection: turn off for maximized throughput. Auto for greater security.
Support 802.11n Client Only: turn on the option is to only provide wireless access to the clients
operating at 802.11n speeds.
RIFS Advertisement: Reduced Inter-frame Spacing (RIFS) is a 802.11n feature that also improves
performance by reducing the amount of dead time required between OFDM transmissions. Select
Off to disable this function or auto to enable this function.
OBSS Co-Existance: coexistence (or not) between 20 MHZ and 40 MHZ overlapping basic service
sets (OBSS) in wireless local area networks.
Multicast Rate: Setting for multicast packets transmission rate.
Basic Rate: Setting for basic transmission rate. It is not a certain kind of rate, it is a series of rates
supported. When set to Default, the router can transmit with all kinds of standardized rates.
Fragmentation Threshold: A threshold (in bytes) whether the packets will be fragmented and at
what size. Packets succeeding the fragmentation threshold of 802.11n WLAN will be split into
smaller units suitable for circuit size. While the packets smaller than fragmentation threshold will not
be fragmented. Default is 2346, setting the fragmentation too low may result in poor performance.
RTS Threshold: Request to Send (RTS) threshold specifies the packet size, when exceeds the size,
the RTS/CTS will be triggered. The default setting of 2347(max length) will disable the RTS.
DTIM Interval: Delivery Traffic Indication Message (DTIM). The entry range is a value between 1
and 255. A DTIM is countdown variable that informs clients of the next window for listening to
broadcast and multicast messages. When the AP has buffered broadcast or multicast messages for
associated clients, it sends the next DTIM with a DTIM interval value. AP clients hear the beacons
and awaken to receive the broadcast and multicast messages. The default is 1.
Beacon Interval: The amount of time between beacon transmissions in is milliseconds. The default
is 100ms and the acceptable is 1- 65535. The beacon transmissions identify the presence of an
access point.
Global Max Clients: Here you have the option of setting the limit of the number of clients who can
connect to your wireless network.
XPress Technology: It has been designed to improve the wireless network efficiency. Default is
disabled.
Regulatory Mode: select to deny any regulatory mode. There are two regulatory modes:
802.11h: The standard solves interference problems with e.g. satellites and radar using the same
5 GHz band as 802.11a or 802.11n dual-band access points.
802.11d: This standard automatically adjusts its allowed frequencies, power levels and bandwidth
accordingly to the country it's located in.
This means that manufacturers don't need to make country specific products.
Transmit Power: select the transmitting power of your wireless signal.
WMM (Wi-Fi Multimedia): you can choose to enable or disable this function which allows for priority
of certain data over wireless network.
WMM No Acknowledgement: Refers to the acknowledge policy at the MAC level. Enabling WMM
No Acknowledgement can result in more efficient throughput but higher error rates in noisy Radio
Frequency (RF) environment.
WMM APSD: Automatic Power Save Delivery. Enable this to save power.

130
Station Info
Here you can view the information about the wireless clients.

MAC Address: the MAC address of the wireless clients.


Associated: List all the stations that are associated with the Access Point. If a station is idle for too
long, it is removed from this list
Authorized: List those devices with authorized access.
SSID: show the current SSID of the client.
Interface: to show which interface the wireless client is connected to.
Refresh: to get the latest information.

131
Management

There are 9 items within the System section: System Log, SNMP Agent, TR-069 Client, Internet
Time, Mail Alert, Access Control, Remote Access, Update Software and Backup/Update.

132
System Log

To let users view or configure System Log.

Click to configure the log.

Log: enable or disable this function.


Log level: select your log level. The log level allows you to configure which types of events are
loged. There are eight log levels from high to low are displayed below:
L Emergency = system is unusable (these appear in red in the log)
L Alert = action must be taken immediately (pale red)
L Critical = critical conditions (orange)
L Error = error conditions (yellow)
L Warning = warning conditions (green)
L Notice = normal but significant conditions (blue)
L Informational = information events (white)
L Debugging = debug-level messages (dark grey on cream)
The gateway records all log events at the chosen level and above. For instance, if you set the log
level to Critical, all critical, alert, and emergency events are logged, but none of the others are
recorded
Display Level: display the log according to the level you set when you view system log. Once you
set the display level, the logs of the same or higher priority will be displayed.
Mode: select the mode the system log adopted. Three modes: local, Remote and Both.
L Local: select this mode to store the logs in the routers local memory.
L Remote: select this mode to send the log information to a remote log server. Then you must
assign the remote log server and port, 514 is often used.
L Both: logs stored adopting above two ways.
133
Click to see the System log of this router. The logs will be listed as configured
above. Click refresh to get the latest information.

Click Apply to save your settings.

134
SNMP Agent

SNMP, Simple Network Management Protocol, is the most popular one in network. It consists of
SNMP ManagerSNMP Agent and MIB. Every network device supporting SNMP will have a SNMP
Agent which is a management software running in the device.

SNMP Manager, the management software running the server, is to use SNMP protocol to send
GetRequestGetNextRequest, SetRequest message to Agent to view and change the information
of the device.

SNMP Agents, the management software running in the device, accepts the message from the
manager, Reads or Writes the management variable in MIB accordingly and then generates
Response message to send it to the manager. Also, agent will send Trap message to the manager
when agent finds some exceptions.

Trap message, is the message automatically sent by the managed device without request to the
manager about the emergency events.

SNMP Agent: enable or disable SNMP Agent.


WAN Access: enable or disable WAN access which allows PCs in WAN side read or set the SNMP
related MIB pamareters.
Read Community: Type the Get Community, which is the authentication for the incoming Get-and
GetNext requests from the management station.
Set Community: Type the Set Community, which is the authentication for incoming Set requests
from the management station.
System Name: here it refers to your router.
System Location: user-defined location.
System Contact: user-defined contact message.
Trap manager IP: enter the IP address of the server receiving the trap sent by SNMP agent.

135
TR- 069 Client
TR-069 (short for Technical Report 069) is a DSL Forum (which was later renamed as Broadband
Forum) technical specification entitled CPE WAN Management Protocol (CWMP). It defines an
application layer protocol for remote management of end-user devices. It defines an application layer
protocol for remote management of end-user devices.

As a bidirectional SOAP/HTTP based protocol it can provides the communication between customer
premises equipment (CPE) and Auto Configuration Server (ACS). It includes both a safe
configuration and the control of other CPE management functions within an integrated framework. In
the course of the booming broadband market, the number of different internet access possibilities
grew as well (e.g. modems, routers, gateways, set-top box, VoIP-phones).At the same time the
configuration of this equipment became more complicated too complicated for end-users. For this
reason, TR-069 was developed. It provides the possibility of auto configuration of the access types.
Using TR-069 the terminals can get in contact with the Auto Configuration Servers (ACS) and
establish the configuration automatically and let ACS configure CPE automatically.

Inform: select enable to let CPE be authorized to send Inform message to automatically connect to
ACS.
Inform Interval: Specify the inform interval time (sec) which CPE used to periodically send inform
message to automatically connect to ACS. When the inform interval time arrives, the CPE will send
inform message to automatically connect to ACS.
ACS URL: Specify the URL of ACS. ACS and CPE communicate via URL.
ACS User Name: Specify the ACS User Name for ACS authentication to the connection from CPE.
ACS password: Specify the ACS password for ACS authentication to the connection from CPE.
WAN interface used by TR-069: select the interface used by TR-069.
Display SOAP message on serial console: select whether to display SOAP message on serial
console.
Connection Request Authentication: Check to enable connection request authentication feature.
136
Connection Request User Name: Enter the username for CPE authentication to the connection
from ACS.
Connection Request User Password: Enter the password for CPE authentication to the
connection from ACS.
GetRPCMethodssupported by both CPE and ACS, display the supported RFC listing methods.

Click Apply to apply your settings.

137
Internet Time
The router does not have a real time clock on board; instead, it uses the Network Time Protocol
(NTP) to get the most current time from an NTP server.
NTP is a protocol for synchronization of computers. It can enable computers synchronize to the NTP
server or clock source with a high accuracy.

Choose the NTP time server from the drop-down menu, If you prefer to specify an NTP server other
than those in the drop-down list, simply enter its IP address in their appropriate blanks provided as
shown above. Your ISP may also provide an SNTP server for you to use.

Choose your local time zone from the drop-down menu. After a successful connection to the Internet,
the router will retrieve the correct local time from the NTP server you have specified. If you prefer to
specify an NTP server other than those in the drop-down list, simply enter its IP address in their
appropriate blanks provided as shown above. Your ISP may also provide an NTP server for you to
use.

Click Apply to apply your settings.

138
Mail Alert

Mail alert is designed to keep system administrator or other relevant personnels alerted of any
unexpected events that might have occured to the network computers or server for monitoring
efficiency. With this alert system, appropriate solutions may be tackled to fix problems that may have
arisen so that the server can be properly maintained.

SMTP Server: Enter the SMTP server that you would like to use for sending emails.
Username: Enter the username of your email account to be used by the SMTP server.
Password: Enter the password of your email account.
Senders Email: Enter your email address.
SSL: check to whether to enable SSL function.
Port: the default is 25.
Recipients Email (WAN IP Change Alert): Enter the email address that will receive the alert
message once an WAN IP change has been detected.

139
Access Control
Access Control is used to prevent unauthorized access to the router configuration page. Here you
can change the login user password. Three user levels are provided here. Each user level theres a
default provided user. You must access the router with the appropriate username and password.
Here the corresponding passwords are allowed to change.

Username: select which username you want to change password to. There are three default users.
L Admin: the root user, corresponding default password is admin.
L Support: username for the remote user to login, corresponding default password is support.
L User: username for the general user, corresponding default password is user.
Old Password: Enter the old password.
New Password: Enter the new password.
Confirm Password: Enter again the new password to confirm.

Click Apply to apply your new settings.

140
Remote Access
It is to allow remote access to the router to view or configure.

Remote: Select to enable or disable Remote Access functionality.

141
Update Software
Software upgrading lets you experience the new and integral function of your router.

Your routers firmware is the software that allows it to operate and provides all its functionality.
Think of your router as a dedicated computer, and the firmware as the software it runs. Over time
this software may be improved and revised, and your router allows you to upgrade the software it
runs to take advantage of these changes.
Clicking on Browse will allow you to select the new firmware image file you have downloaded to your
PC. Once the correct file is selected, click Upgrade to update the firmware in your router.

Note: here when you finished upgrading, your router will restart with the current setting. If you want
restart with the default setting, turn to Restart, select the correct restart mode.

142
Backup / Update
These functions allow you to save and backup your routers current settings to a file on your PC, or
to restore from a previously saved backup. This is useful if you wish to experiment with different
settings, knowing that you have a backup handy in the case of any mistakes. It is advisable to
backup your routers settings before making any significant changes to your routers configuration.

Click Backup Settings, a window appears, click save , then browse the location where you want to
save the backup file.

Click Browse and browse to the location where your backup file is saved, the click Open. Then in
the above page, click Update Settings, the following process indicating screen will appear. Let it
update to 100%, it will automatically turn to the Device Info page.

143
Restart
This section lets you restart your router if necessary. Click in the low right corner of each
configuration page.

If you wish to restart the router using the factory default settings (for example, after a firmware
upgrade or if you have saved an incorrect configuration), select Factory Default Settings to reset to
factory default settings. Or you just want to restart after the current setting, the select the Current
Settings, and Click Restart.

144
Chapter 5: Troubleshooting
If your router is not functioning properly, please refer to the suggested solutions provided in this
chapter. If your problems persist or the suggested solutions do not meet your needs, please kindly
contact your service provider or Billion for support.

Problems with the router

Problem Suggested Action


None of the LEDs is on when you turn Check the connection between the router and the
on the router adapter. If the problem persists, most likely it is due
to the malfunction of your hardware. Please contact
your service provider or Billion for technical support.
You have forgotten your login username Try the default username "admin" and password
or password "admin". If this fails, you can restore your router to
its factory settings by pressing the reset button on
the device rear side.

Problems with WAN interface

Problem Suggested Action


Frequent loss of ADSL line sync Ensure that all other devices connected to the same
(disconnections) telephone line as your router (e.g. telephones, fax
machines, analogue modems) have a line filter
connected between them and the wall socket (unless
you are using a Central Splitter or Central Filter
installed by a qualified and licensed electrician), and
ensure that all line filters are correctly installed and the
right way around. Missing line filters or line filters
installed the wrong way around can cause problems
with your ADSL connection, including causing frequent
disconnections. If you have a back-to-base alarm
system you should contact your security provider for a
technician to make any necessary changes.

145
Problem with LAN interface
Problem Suggested Action
Cannot PING any PC on LAN Check the Ethernet LEDs on the front panel.
The LED should be on for the port that has a PC
connected. If it does not lit, check to see if the cable
between your router and the PC is properly
connected. Make sure you have first uninstalled your
firewall program before troubleshooting.
Verify that the IP address and the subnet mask are
consistent for both the router and the workstations.

146
Appendix: Product Support & Contact
If you come across any problems please contact the dealer from where you purchased your
product.

Contact Billion

Worldwide:

http://www.billion.com

MAC OS is a registered Trademark of Apple Computer, Inc.

Windows 7/98, Windows NT, Windows 2000, Windows Me, Windows XP and Windows Vista are registered
Trademarks of Microsoft Corporation.
147